Generate OAuth Client Secret

POST /port1/{principalType}/{principalId}/oauth-clients/{clientId}/secrets

Creates an additional secret and returns its plaintext once. Existing secrets remain active until explicitly revoked.

Required scope

Any authenticated access token

principalTypestringRequired: The type of principal that owns the OAuth client
principalIdstringRequired: The ID of the principal that owns the OAuth client
clientIdstringRequired: The ID of the OAuth client

Generate OAuth Client Secret response.

secretIdstringRequired: Opaque child identifier scoped to the selected OAuth client.
clientSecretstringRequired: Plaintext client secret returned once.

400 BAD_REQUEST

Invalid request path.

Check the request fields and any validation details, then correct the payload.

401 UNAUTHORIZED

Authentication required.

Obtain a valid access token, then retry.

403 FORBIDDEN

The caller cannot read or manage the selected OAuth client.

Check the linked account and its permissions for the device or resource.

404 NOT_FOUND

OAuth client or secret not found.

Verify the target identifier and that its endpoint or plugin route still exists.

500 INTERNAL

Internal server error.

Retry with backoff only when the operation is safe to repeat. Include the error code when reporting persistent failures.